This post is continuation of the first part of the post : Part I
[oraprod@non-prod-db patch]$ sh checkDBpatch.sh
In the application server, run checkMTpatch.sh
|
cd
/apdata/patch/ETCC Envoke run filesystem [appltest@testapp
~]$ . /apdata/erp/EBSapps.env run [appltest@testapp
patch]$ sh checkMTpatch.sh +===============================================================+ =============================================================================== PATCH
RECOMMENDATION SUMMARY =============================================================================== One or
more products have bugfixes missing. The
default patch recommendations to install these missing bugfixes are: ------------------------------------------------------------------------------- Oracle Forms and Reports 10.1.2.3.0 ------------------------------------------------------------------------------- Patch 27491934 - Filename: p27491934_101232_LINUX.zip Patch 32922089 - Filename: p32922089_101232_LINUX.zip ------------------------------------------------------------------------------- Oracle Fusion Middleware (FMW) - Web
Tier 11.1.1.9.0 ------------------------------------------------------------------------------- Patch 35540062 - Filename:
p35540062_111190_Linux-x86-64.zip Patch 32287205 [IMPORTANT: Follow Note
2555355.1 before applying.] - Filename:
p32287205_111190_Linux-x86-64.zip Patch 23716938 - Filename: p23716938_111190_Generic.zip Patch 32928416 - Filename:
p32928416_111190_Linux-x86-64.zip Patch 33144848 - Filename:
p33144848_111190_Linux-x86-64.zip Patch
34067016 - Filename:
p34067016_11119210420OSS_Linux-x86-64.zip ------------------------------------------------------------------------------- FMW - Web Tier 11.1.0.7.0 ------------------------------------------------------------------------------- Patch 22290164 - Filename:
p22290164_111070_Linux-x86-64.zip ------------------------------------------------------------------------------- Oracle Fusion Middleware (FMW) -
Oracle Common 11.1.1.9.0 ------------------------------------------------------------------------------- Patch 33974106 - Filename: p33974106_111190_Generic.zip Patch 34330735 - Filename: p34330735_111190_Generic.zip Patch 27212806 - Filename: p27212806_111190_Generic.zip Patch 28708563 - Filename: p28708563_111190_Generic.zip Patch 26933408 - Filename: p26933408_111190_Generic.zip Patch 33960746 - Filename: p33960746_111190_Generic.zip Patch 34714760 - Filename: p34714760_111190_Generic.zip Apply the
required patches and rerun this script. +-----------------------------------------------------------------------------+ A
consolidated zip file with the required application tier patches is available
on My Oracle Support via: Patch 36616672 - EBS RELEASE 12.2 CONSOLIDATED FMW FIXES
FOR JUL 2024 +-----------------------------------------------------------------------------+ [WARNING]
Patch 33528262 SU Patch [HYG5]: WLS PSU 10.3.6.0.220118 is missing. Filename: p33528262_R12_GENERIC.zip This is
the current recommended minimum WLS patch set. As patch
sets are not included in the consolidated zip file, you must obtain it (or a
later one, if available) from My Oracle Support and install it by following
its Readme. After
successful installation, rerun this script to check for any further available
fixes. +-----------------------------------------------------------------------------+ See Doc
ID 2877607.1 for any special instructions regarding these patches. Footnotes
in Doc ID 2877607.1 also apply to corresponding overlay patches. Finished
checking prerequisite patches for file edition: run. Thu May
15 17:24:42 IST 2025 Log file
for this session: /apdata/patch/log/checkMTpatch_21665.log =============================================================================== |
Above patch recommendations were given and we will start
installing them one by one in application server. Before patching ensure all
application services are down.
|
Oracle Forms and Reports 10.1.2.3.0 ------------------------------------------------------------------------------- Login to application server. Invoke run file system [appltest@testapp ETCC]$ . /apdata/erp/EBSapps.env run 1. Patch 27491934 [appltest@testapp OPatch]$ cd
/apdata/patch/etcc-bundle/LINUX_X86-64/forms/10.1.2.3.0/27491934 [appltest@testapp 27491934]$
/apdata/erp/fs2/EBSapps/10.1.2/OPatch/opatch apply
Oracle Fusion Middleware (FMW) - Web
Tier 11.1.1.9.0 ------------------------------------------------------------------------------- 1. Patch 35540062 [appltest@testapp j2ee]$ echo
$IAS_ORACLE_HOME /apdata/erp/fs2/FMW_Home/webtier [appltest@testapp j2ee]$ export
ORACLE_HOME=$IAS_ORACLE_HOME [appltest@testapp j2ee]$ echo
$ORACLE_HOME /apdata/erp/fs2/FMW_Home/webtier [appltest@testapp j2ee]$ export
PATH=$IAS_ORACLE_HOME/OPatch:$PATH [appltest@testapp ~]$ cd
/apdata/patch/etcc-bundle/LINUX_X86-64/webtier/11.1.1.9.0/35540062 [appltest@testapp 35540062]$ opatch
apply -jre $ORACLE_HOME/jdk/jre Post installation of the patch do
following Take a backup of existing ssl.conf [appltest@testapp EBS_web_TEST]$ vi
ssl.conf Look for following sections in ssl.conf file and replace with following SSLProtocol TLSv1.2 SSLCipherSuite
ALL:!ADH:+HIGH:+MEDIUM:!RC4:!3DES 2.
Patch 32287205 [IMPORTANT: Follow Note
2555355.1 before applying. a Log in as the user that owns the
application tier installation (this is apps user). Source the run file system environment and the $FMW_HOME/SetWebtier.env file. [appltest@testapp ~]$ .
/apdata/erp/EBSapps.env run [appltest@testapp
webtier]$ source $FMW_HOME/SetWebtier.env Set an alias for the correct orapki. [appltest@testapp ~]$ mkdir ~/ss [appltest@testapp ~]$ cd ~/ss [appltest@testapp ss]$ orapki wallet
create -wallet ./ -auto_login_only The last command (orapki wallet
display -wallet .) allows you to verify that the wallet was properly created. e Find the instanceName of this
environment and save it in a shell variable for later use. [appltest@testapp ss]$ tr < $CONTEXT_FILE '<>' ' ' | awk '/"s_ohs_instance"/ {print $(NF-1)}' f Go
to the instance directory. [appltest@testapp ss]$ cd
$FMW_HOME/webtier/instances/$iName g Find the default server wallets used
by this instance. ./config/OHS/EBS_web_EBS/keystores/default/cwallet.sso ./config/OHS/EBS_web_EBS/proxy-wallet/cwallet.sso h Verify that each wallet only contains
the self-signed certificate. [appltest@testapp EBS_web_EBS_OHS1]$ find . -name cwallet.sso | fgrep -v /webgate/ | while read w ; do echo -e "\n$w"; orapki wallet display -nologo -wallet $w ; done Requested Certificates: User Certificates: Subject: CN=Self-Signed Certificate for
EBS_web_EBS_OHS1\20,OU=OAS,O=ORACLE,L=REDWOODSHORES,ST=CA,C=US Trusted Certificates: Subject: CN=Self-Signed Certificate for
EBS_web_EBS_OHS1\20,OU=OAS,O=ORACLE,L=REDWOODSHORES,ST=CA,C=US ./config/OHS/EBS_web_EBS/keystores/default/cwallet.sso Requested Certificates: User Certificates: Subject: CN=Self-Signed Certificate for
EBS_web_SEL\20,OU=OAS,O=ORACLE,L=REDWOODSHORES,ST=CA,C=US Trusted Certificates: Subject: CN=Self-Signed Certificate for
EBS_web_SEL\20,OU=OAS,O=ORACLE,L=REDWOODSHORES,ST=CA,C=US ./config/OHS/EBS_web_EBS/proxy-wallet/cwallet.sso Requested Certificates: User Certificates: Subject: CN=Self-Signed Certificate for
EBS_web_EBS\20,OU=OAS,O=ORACLE,L=REDWOODSHORES,ST=CA,C=US Trusted Certificates: Subject: CN=Self-Signed Certificate for
EBS_web_EBS\20,OU=OAS,O=ORACLE,L=REDWOODSHORES,ST=CA,C=US i If
it is a default wallet, each wallet should list one "User
Certificate" and an identical "Trusted Certificate", as shown
in the following example: ./config/OPMN/opmn/wallet/cwallet.sso Requested Certificates: User Certificates: Subject: CN=Self-Signed Certificate for
EBS_web_EBS_OHS1\20,OU=OAS,O=ORACLE,L=REDWOODSHORES,ST=CA,C=US Trusted Certificates: Subject: CN=Self-Signed Certificate for
EBS_web_EBS_OHS1\20,OU=OAS,O=ORACLE,L=REDWOODSHORES,ST=CA,C=US j Copy the new SHA-256 signed wallet to all default server wallet locations. [appltest@testapp EBS_web_EBS_OHS1] find
. -name cwallet.sso | fgrep -v /webgate/ | while read w ; do echo $w; cp -p
~/ss/cwallet.sso $w ; done ./config/OHS/EBS_web_EBS/keystores/default/cwallet.sso ./config/OHS/EBS_web_EBS/proxy-wallet/cwallet.sso [appltest@testapp opmn]$ find .
-name cwallet.sso ./EBS_web_EBS_OHS1/wallet/cwallet.sso ./EBS_web_EBS_OHS1/EBS_web_EBS/wallet/cwallet.sso [appltest@testapp opmn]$ find .
-name cwallet.sso | while read w ; do echo $w; cp -p ~/ss/cwallet.sso $w ;
done ./EBS_web_EBS_OHS1/wallet/cwallet.sso ./EBS_web_EBS_OHS1/EBS_web_EBS/wallet/cwallet.sso By completing (a-k) steps, you have
now copied the new self-signed wallet to the default locations in the run
file system. This avoids modifying the OPMN and OHS configuration files to
point to a different wallet (or wallet directory). Make sure to remove # before the
entries. #Oracle HTTP Server Wallet -
cwallet.sso The changes will be propagated to the
patch file system when we perform the prepare phase (adop phase=prepare) of
the next online patching cycle. Adding the JVM Startup Parameter [appltest@testapp ~]$ .
/apdata/erp/EBSapps.env patch [appltest@testapp ~]$
$ADMIN_SCRIPTS_HOME/adadminsrvctl.sh start forcepatchfs Source the Run File System and
SetWebtier.env File [appltest@testapp ~]$ . /apdata/erp/EBSapps.env
run [appltest@testapp ~]$ source
$FMW_HOME/SetWebtier.env Add Parameter to WLS Admin Server Take a backup of existing
context_file first.
Look for s_nm_jvm_startup_properties
parameter and append the JVM parameter -DUseSunHttpHandler=true to
the s_nm_jvm_startup_properties context variable. vi $CONTEXT_FILE It should look like this Shutdown application on run file system. [appltest@testapp scripts]$ cd
$ADMIN_SCRIPTS_HOME [appltest@testapp scripts]$ sh
adstpall.sh Run AutoConfig on application tier. [appltest@testapp scripts]$ sh
adautocfg.sh Note:-At this phase we faced error
while running autoconfig Which was caused due to invalid
status package body APPS.AD_ZD_ADOP Solution:- Execute as sys user grant execute on DBMS_METADATA_UTIL
to apps; alter package APPS.AD_ZD_ADOP compile
body;
[appltest@testapp fs2]$
$ADMIN_SCRIPTS_HOME/adadminsrvctl.sh start Add Parameter to Managed Servers
http://ebsprodapp.soumya.com:7002/console
-DUseSunHttpHandler=true) Click Save. Repeat steps 3 and 4 for all
remaining managed servers.( forms_server1 , oacore_server1, oafm_server1) Click Activate Changes. Stop and restart the AdminServer
services. [appltest@testapp fs2]$
$ADMIN_SCRIPTS_HOME/adadminsrvctl.sh stop [appltest@testapp fs2]$
$ADMIN_SCRIPTS_HOME/adadminsrvctl.sh start Configuring the SSL Protocol and
Cipher Suites [appltest@testapp ~]$ .
/apdata/erp/EBSapps.env run [appltest@testapp ~]$ source
$FMW_HOME/SetWebtier.env Make Changes in the ssl.conf and admin.conf Files [appltest@testapp ~]$ vi /apdata/erp/fs2/FMW_Home/webtier/instances/EBS_web_EBS_OHS1/config/OHS/EBS_web_EBS/ssl.conf [appltest@testapp ~]$ vi
/apdata/erp/fs2/FMW_Home/webtier/instances/EBS_web_EBS_OHS1/config/OHS/EBS_web_EBS/admin.conf Make following changes in above two files SSLCipherSuite HIGH:MEDIUM SSLProtocol TLSv1.2 Make Changes in the opmn.xml
File In the opmn.xml file,
locate the ssl element and modify
the ssl-versions and ssl-ciphers attributes to match the
following: [appltest@testapp opmn]$ vi
/apdata/erp/fs2/FMW_Home/webtier/instances/EBS_web_EBS_OHS1/config/OPMN/opmn/opmn.xml <ssl enabled="true"
wallet-file="<path to your wallet>"
ssl-versions="TLSv1.2" ssl-ciphers="SSL_RSA_WITH_AES_128_CBC_SHA,SSL_RSA_WITH_AES_128_GCM_SHA256"/> 3.
Apply Patch 32287205 [appltest@testapp ~]$cd
$ADMIN_SCRIPTS_HOME [appltest@testapp scripts]$ sh
adstpall.sh [appltest@testapp 32287205]$ cd
/apdata/patch/etcc-bundle/LINUX_X86-64/webtier/11.1.1.9.0/32287205 [appltest@testapp j2ee]$ export
ORACLE_HOME=$IAS_ORACLE_HOME [appltest@testapp j2ee]$ export
PATH=$IAS_ORACLE_HOME/OPatch:$PATH [appltest@testapp 32287205]$ export
LOOP=DONE [appltest@testapp 32287205]$ opatch
apply 4.
Apply Patch 23716938 [appltest@testapp 23716938]$ opatch
apply 5.
Apply Patch
32928416 [appltest@testapp 32928416]$ opatch
apply [appltest@testapp 33144848]$ opatch
apply -jre $ORACLE_HOME/jdk/jre [appltest@testapp 34067016]$ opatch
apply |
|
FMW - Web Tier 11.1.0.7.0 Apply
patch 22290164 [appltest@testapp j2ee]$ export ORACLE_HOME=$IAS_ORACLE_HOME [appltest@testapp j2ee]$ export
PATH=$IAS_ORACLE_HOME/OPatch:$PATH [appltest@testapp ~]$ cd
/apdata/patch/etcc-bundle/LINUX_X86-64/webtier/11.1.0.7.0/22290164 [appltest@testapp 22290164]$ opatch
apply |
|
WLS Patch Set Update 10.3.6.0.220118
1. Unzip Patch p12426828_1035_Generic [appltest@testapp patch]$ cd
/apdata/patch Open a xwindow as this will open a
gui installer [appltest@testapp patch]$ java -jar
patch-client-installer330_generic32.jar
- Select “Middleware Home”
(/apdata/erp/fs2/FMW_Home) you would like Smart Update to be installed to - Select “Typical Installation” - Complete the installation
2. Now, Unzip p31136426_1036_Generic
and copy it inside /apdata/erp/fs2/FMW_Home/utils/bsu Copy following files [appltest@testapp ~]$ cd /apdata/patch/ [appltest@testapp patch]$ cp -r
bsu_update.sh bsu_update.bat bsu_update /apdata/erp/fs2/FMW_Home/utils/bsu
[appltest@testapp patch]$ cd
/apdata/erp/fs2/FMW_Home/utils/bsu [appltest@testapp bsu]$ chmod 775
bsu_update.sh [appltest@testapp bsu]$
./bsu_update.sh install
Now before installing
p33494814_1036_Generic.zip, remove the conflict patches
[appltest@testapp bsu]$ ./bsu.sh
-remove -patchlist=EQDE,Z9PC,KRDE,9KCT,QMJP
-prod_dir=/apdata/erp/fs2/FMW_Home/wlserver_10.3
[appltest@testapp bsu]$ ./bsu.sh
-remove -patchlist=K25M,YVDZ,YHJK,XNBA
-prod_dir=/apdata/erp/fs2/FMW_Home/wlserver_10.3
3. Unzip p33528262_R12_GENERIC to
receive p33494814_1036_Generic.zip
Copy p33494814_1036_Generic.zip
inside /apdata/erp/fs2/FMW_Home/utils/bsu/cache_dir
and unzip it
[appltest@testapp bsu]$ cd
/apdata/patch/ [appltest@testapp patch]$ cp
p33494814_1036_Generic.zip /apdata/erp/fs2/FMW_Home/utils/bsu/cache_dir [appltest@testapp bsu]$ cd
/apdata/erp/fs2/FMW_Home/utils/bsu/cache_dir [appltest@testapp cache_dir]$ unzip
p33494814_1036_Generic.zip [appltest@testapp bsu]$ cd
/apdata/erp/fs2/FMW_Home/utils/bsu/
Edit MEM_ARGS parameter with
following value [appltest@testapp bsu]$ vi bsu.sh MEM_ARGS="-Xms1024m -Xmx4096m
-XX:+UseParallelGC"
[appltest@testapp bsu]$ ./bsu.sh
-install -patchlist=HYG5
-patch_download_dir=/apdata/erp/fs2/FMW_Home/utils/bsu/cache_dir -verbose
-prod_dir=/apdata/erp/fs2/FMW_Home/wlserver_10.3
4.
Patch
p33845432_R12_GENERIC.zip [appltest@testapp bsu]$ cd
/apdata/patch/
Unzip
this patch to get p33800106_1036_Generic.zip unzip
p33800106_1036_Generic.zip Copy
all files [appltest@testapp
5]$ cp -r bsu_update bsu_update.bat bsu_update.sh
/apdata/erp/fs2/FMW_Home/utils/bsu
[appltest@testapp
5]$ cd /apdata/erp/fs2/FMW_Home/utils/bsu [appltest@testapp
bsu]$ ./bsu_update.sh install
5.
Patch
p13845626_10360220118_Generic.zip [appltest@testapp
bsu]$ cd /apdata/patch/etcc-bundle/LINUX_X86-64/wls/10.3.6.0.220118 [appltest@testapp
10.3.6.0.220118]$ cp p13845626_10360220118_Generic.zip
/apdata/erp/fs2/FMW_Home/utils/bsu/cache_dir [appltest@testapp
10.3.6.0.220118]$ cd /apdata/erp/fs2/FMW_Home/utils/bsu/cache_dir [appltest@testapp cache_dir]$
unzip p13845626_10360220118_Generic.zip [appltest@testapp
bsu]$ cd /apdata/erp/fs2/FMW_Home/utils/bsu
[appltest@testapp
bsu]$ ./bsu.sh -install -patchlist=IJC1
-patch_download_dir=/apdata/erp/fs2/FMW_Home/utils/bsu/cache_dir -verbose
-prod_dir=/apdata/erp/fs2/FMW_Home/wlserver_10.3
6.
Patch
p13964737_10360220118_Generic.zip [appltest@testapp
bsu]$ cd /apdata/patch/etcc-bundle/LINUX_X86-64/wls/10.3.6.0.220118 [appltest@testapp 10.3.6.0.220118]$ cp p13964737_10360220118_Generic.zip /apdata/erp/fs2/FMW_Home/utils/bsu/cache_dir [appltest@testapp 10.3.6.0.220118]$ cd /apdata/erp/fs2/FMW_Home/utils/bsu/cache_dir [appltest@testapp
cache_dir]$ unzip p13964737_10360220118_Generic.zip [appltest@testapp
cache_dir]$ cd .. [appltest@testapp
bsu]$ ./bsu.sh -install -patchlist=7GCA
-patch_download_dir=/apdata/erp/fs2/FMW_Home/utils/bsu/cache_dir -verbose
-prod_dir=/apdata/erp/fs2/FMW_Home/wlserver_10.3
7.
Patch
p34856303_1036_Generic.zip [appltest@testapp 10.3.6.0.220118]$ cd /apdata/patch/etcc-bundle/LINUX_X86-64/wls/10.3.6.0.220118 [appltest@testapp
10.3.6.0.220118]$ cp p34856303_1036_Generic.zip
/apdata/erp/fs2/FMW_Home/utils/bsu/cache_dir [appltest@testapp 10.3.6.0.220118]$ cd /apdata/erp/fs2/FMW_Home/utils/bsu/cache_dir [appltest@testapp cache_dir]$ unzip p34856303_1036_Generic.zip [appltest@testapp
cache_dir]$ cd .. [appltest@testapp bsu]$ ./bsu.sh -remove -patchlist=DN1F -prod_dir=/apdata/erp/fs2/FMW_Home/wlserver_10.3 Checking
for conflicts.. No
conflict(s) detected
Removing
Patch ID: DN1F. Result:
Success [appltest@testapp bsu]$ ./bsu.sh -install -patchlist=ENUU -patch_download_dir=/apdata/erp/fs2/FMW_Home/utils/bsu/cache_dir -verbose -prod_dir=/apdata/erp/fs2/FMW_Home/wlserver_10.3 Checking
for conflicts.. Result:
Success
8.
Patch
p35476084_1036_Linux-x86-64.zip [appltest@testapp
bsu]$ cd /apdata/patch/etcc-bundle/LINUX_X86-64/wls/10.3.6.0.220118 [appltest@testapp 10.3.6.0.220118]$ cp p35476084_1036_Linux-x86-64.zip /apdata/erp/fs2/FMW_Home/utils/bsu/cache_dir [appltest@testapp 10.3.6.0.220118]$ cd /apdata/erp/fs2/FMW_Home/utils/bsu/cache_dir [appltest@testapp
cache_dir]$ unzip p35476084_1036_Linux-x86-64.zip [appltest@testapp cache_dir]$ cd .. [appltest@testapp bsu]$ ./bsu.sh -install -patchlist=KMHV -patch_download_dir=/apdata/erp/fs2/FMW_Home/utils/bsu/cache_dir -verbose -prod_dir=/apdata/erp/fs2/FMW_Home/wlserver_10.3 |
|
------------------------------------------------------------------------------- Oracle Fusion Middleware (FMW) -
Oracle Common 11.1.1.9.0 1.
Patch 33974106 [appltest@testapp
33974106]$ export ORACLE_HOME=/apdata/erp/fs2/FMW_Home/oracle_common [appltest@testapp
33974106]$ export PATH=$ORACLE_HOME/OPatch:$PATH [appltest@testapp
11.1.1.9.0]$ cd
/apdata/patch/etcc-bundle/LINUX_X86-64/oracle_common/11.1.1.9.0/33974106 [appltest@testapp
33974106]$ opatch apply 2.
Patch 34330735 [appltest@testapp
oui]$ cd
/apdata/patch/etcc-bundle/LINUX_X86-64/oracle_common/11.1.1.9.0/34330735/oui [appltest@testapp
oui]$ opatch apply [appltest@testapp
11.1.1.9.0]$ cd
/apdata/patch/etcc-bundle/LINUX_X86-64/oracle_common/11.1.1.9.0/27212806 [appltest@testapp
27212806]$ opatch apply [appltest@testapp
27212806]$ cd
/apdata/patch/etcc-bundle/LINUX_X86-64/oracle_common/11.1.1.9.0/28708563 [appltest@testapp
28708563]$ opatch apply 5.
Patch 26933408 [appltest@testapp
28708563]$ cd
/apdata/patch/etcc-bundle/LINUX_X86-64/oracle_common/11.1.1.9.0/26933408 [appltest@testapp
26933408]$ opatch apply Patch 33960746 [appltest@testapp
26933408]$ cd
/apdata/patch/etcc-bundle/LINUX_X86-64/oracle_common/11.1.1.9.0/33960746 [appltest@testapp
33960746]$ opatch apply 7.
Patch 34714760 [appltest@testapp
33960746]$ cd
/apdata/patch/etcc-bundle/LINUX_X86-64/oracle_common/11.1.1.9.0/34714760 [appltest@testapp
34714760]$ opatch apply Now rerun sh checkMTpatch.sh , this time it should show not any more
recommended patches to apply. |
Run fs_clone to sync between run and patch file system. Make
sure application is down on run file system.Only admin server should be up.
However if its not up during fs_clone phase
it will start up.
Important:
Ensure no application service is up and running even from patch file system
[appltest@testapp ~]$ . /apdata/erp/EBSapps.env run
[appltest@testapp scripts]$ adop phase=fs_clone force=yes
List of patches to be applied
|
Patch Number |
Description |
|
R12.AD.C.delta.16 |
|
|
R12.TXK.C.delta.16 |
|
|
Patch 36989014 |
R12.AD.C |
No comments:
Post a Comment